Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-26756

Eventing UI should not take user credentials

    XMLWordPrintable

Details

    Description

      There must be a way to allow libcouchbase and gocb to utilize the credentials generated by server so the libraries can be used to access buckets from within server. Currently, the credentials are node specific, and the SDKs expect a cluster-wide username and password, and hence it is not possible to utilize them without one of the sides adding support. (The other option is for the code to be vBucket aware and maintain a per node connection pool but at this point, the utility of using an SDK is substantially diminished).

      (Was originally:
      In 5.1, there will be no "run as user" feature. As a result, the functions UI should not take any credentials, and system generated user should be utilized to provide all necessary accesses to resources within the cluster.)

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            Build couchbase-server-5.5.0-1863 contains eventing commit 0a0c6912d0596cc0c2fe9e1f1bf68f628d3ee1b8 with commit message:
            MB-26756 Add cache for credentials
            https://github.com/couchbase/eventing/commit/0a0c6912d0596cc0c2fe9e1f1bf68f628d3ee1b8

            build-team Couchbase Build Team added a comment - Build couchbase-server-5.5.0-1863 contains eventing commit 0a0c6912d0596cc0c2fe9e1f1bf68f628d3ee1b8 with commit message: MB-26756 Add cache for credentials https://github.com/couchbase/eventing/commit/0a0c6912d0596cc0c2fe9e1f1bf68f628d3ee1b8

            Build couchbase-server-5.5.0-1863 contains eventing commit 4ea075bba7ba3196427d0f9a5899a6fc0c50010b with commit message:
            MB-26756 Remove user RBAC credentials from eventing
            https://github.com/couchbase/eventing/commit/4ea075bba7ba3196427d0f9a5899a6fc0c50010b

            build-team Couchbase Build Team added a comment - Build couchbase-server-5.5.0-1863 contains eventing commit 4ea075bba7ba3196427d0f9a5899a6fc0c50010b with commit message: MB-26756 Remove user RBAC credentials from eventing https://github.com/couchbase/eventing/commit/4ea075bba7ba3196427d0f9a5899a6fc0c50010b

            Checked for this in Enterprise Edition 5.5.0 build 1893. But since this code is reverted from master, we still take RBAC credentials from users. Hence reopening this bug.

            Balakumaran.Gopal Balakumaran Gopal added a comment - Checked for this in Enterprise Edition 5.5.0 build 1893. But since this code is reverted from master, we still take RBAC credentials from users. Hence reopening this bug.
            Gautham.Banasandra Gautham Banasandra (Inactive) added a comment - Fixed in this commit -  https://github.com/couchbase/eventing/commit/4ea075bba7ba3196427d0f9a5899a6fc0c50010b  

            Validated this on Enterprise Edition 5.5.0 build 1937. Eventing does not take user credentials anymore.

            Balakumaran.Gopal Balakumaran Gopal added a comment - Validated this on Enterprise Edition 5.5.0 build 1937. Eventing does not take user credentials anymore.

            People

              Gautham.Banasandra Gautham Banasandra (Inactive)
              siri Sriram Melkote (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty